Overview

overview

7

Static

static

3

b4f6979d9c...f2.exe

windows7-x64

7

b4f6979d9c...f2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4f6979d9c3c04c751a54a9677d93e9b82ad316c6c2c78c13bfc642a8c215ef2

  • Size

    6.0MB

  • Sample

    240523-ck7dwaab83

  • MD5

    628f10c9490702a5274eee546fa343f4

  • SHA1

    12f29ee64d46db497537058ec9f5c09cf79078ff

  • SHA256

    b4f6979d9c3c04c751a54a9677d93e9b82ad316c6c2c78c13bfc642a8c215ef2

  • SHA512

    8764e1ad95d719ec3f59cf4a6c6c7244fe58c38af9e0313ef5534db9956ee56e405c5511a2b59c600240406588dcf0e9eb8499112942ffa90940b1a14f23741a

  • SSDEEP

    196608:t7wqheSVYK/bua/BlWWnuVhsus8nm+q4cQW:t8qgSmIbr/Asb8nmFa

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      b4f6979d9c3c04c751a54a9677d93e9b82ad316c6c2c78c13bfc642a8c215ef2

    • Size

      6.0MB

    • MD5

      628f10c9490702a5274eee546fa343f4

    • SHA1

      12f29ee64d46db497537058ec9f5c09cf79078ff

    • SHA256

      b4f6979d9c3c04c751a54a9677d93e9b82ad316c6c2c78c13bfc642a8c215ef2

    • SHA512

      8764e1ad95d719ec3f59cf4a6c6c7244fe58c38af9e0313ef5534db9956ee56e405c5511a2b59c600240406588dcf0e9eb8499112942ffa90940b1a14f23741a

    • SSDEEP

      196608:t7wqheSVYK/bua/BlWWnuVhsus8nm+q4cQW:t8qgSmIbr/Asb8nmFa

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks